Fixed #21345: Don't evaluate callable settings in the debug page.

Thanks to crass for the report.
Added some more tests for the debug page.

* Missing tests for ticket #12744
* Tests for the cleanse_setting feature (leaving out sensitive
  settings from the debug page)